Description

Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.

Remediation

References

CVE-2023-50168

Related Vulnerabilities

Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20099)

WordPress Plugin Fourteen Extended Cross-Site Scripting (1.2.31)

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000194)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5885)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-1648)

Severity

High

Classification

CVE-2023-50168 CWE-611 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities